aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Zaman <jason@perfinion.com>2017-02-05 16:08:00 +0800
committerJason Zaman <jason@perfinion.com>2017-02-05 23:10:31 +0800
commited34f2a2082007b98285bafc17bc33f110270804 (patch)
tree2f5f1d19955afc6c938790726628a0d9652662d6
parentusrmerge: Add missed /usr fcontexts (diff)
downloadhardened-refpolicy-ed34f2a2.tar.gz
hardened-refpolicy-ed34f2a2.tar.bz2
hardened-refpolicy-ed34f2a2.zip
contrib: usrmerge: Add gentoo-specific /usr fcontexts
-rw-r--r--policy/modules/contrib/nut.fc2
-rw-r--r--policy/modules/contrib/openrc.fc2
-rw-r--r--policy/modules/contrib/resolvconf.fc5
3 files changed, 4 insertions, 5 deletions
diff --git a/policy/modules/contrib/nut.fc b/policy/modules/contrib/nut.fc
index 5fa41e6a9..fdf658f1e 100644
--- a/policy/modules/contrib/nut.fc
+++ b/policy/modules/contrib/nut.fc
@@ -19,5 +19,5 @@
/var/www/nut-cgi-bin/upsstats\.cgi -- gen_context(system_u:object_r:httpd_nutups_cgi_script_exec_t,s0)
ifdef(`distro_gentoo',`
-/lib/nut/upsdrvctl -- gen_context(system_u:object_r:nut_upsdrvctl_exec_t,s0)
+/usr/lib/nut/upsdrvctl -- gen_context(system_u:object_r:nut_upsdrvctl_exec_t,s0)
')
diff --git a/policy/modules/contrib/openrc.fc b/policy/modules/contrib/openrc.fc
index 25c063fe1..7d62191ca 100644
--- a/policy/modules/contrib/openrc.fc
+++ b/policy/modules/contrib/openrc.fc
@@ -1 +1 @@
-/lib/rc/sh/cgroup-release-agent.sh -- gen_context(system_u:object_r:openrc_cgroup_release_exec_t,s0)
+/usr/lib/rc/sh/cgroup-release-agent.sh -- gen_context(system_u:object_r:openrc_cgroup_release_exec_t,s0)
diff --git a/policy/modules/contrib/resolvconf.fc b/policy/modules/contrib/resolvconf.fc
index e6a410f62..7db4cb82d 100644
--- a/policy/modules/contrib/resolvconf.fc
+++ b/policy/modules/contrib/resolvconf.fc
@@ -1,8 +1,7 @@
-
/etc/resolvconf.conf -- gen_context(system_u:object_r:resolvconf_conf_t,s0)
-/lib/resolvconf(/.*)? gen_context(system_u:object_r:bin_t,s0)
+/usr/lib/resolvconf(/.*)? gen_context(system_u:object_r:bin_t,s0)
-/sbin/resolvconf -- gen_context(system_u:object_r:resolvconf_exec_t,s0)
+/usr/sbin/resolvconf -- gen_context(system_u:object_r:resolvconf_exec_t,s0)
/var/run/resolvconf(/.*)? gen_context(system_u:object_r:resolvconf_var_run_t,s0)